Tag archive
Cisco has disclosed stored cross-site scripting vulnerabilities in Identity Services Engine guest portals that could let an authenticated attacker with administrative credentials execute script in the management interface context. Updates are available, and Cisco says no workaround exists.
Cisco has disclosed multiple medium-severity cross-site scripting vulnerabilities in Packaged CCE and Unified CCE. The flaws affect the web-based management interface and require valid administrative credentials to exploit.
Cisco has disclosed critical vulnerabilities in Identity Services Engine and ISE-PIC that could let a remote attacker execute code or access sensitive information. Fixes are available, and Cisco says there are no workarounds.
Ubuntu has published USN-8406-1 for Net::CIDR::Lite, addressing flaws that could allow IP-based access control bypasses on affected Ubuntu 16.04 LTS and 18.04 LTS systems.
